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Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. . 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1) CD Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) 

2) D Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(sJ/Mail Date. . 

3) I3 Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5) D Notice of Informal Patent Application (PTO-152) 

Paper No(s)/Mail Date . 6) □ Other: . 



U.S. Patent and Trademark Office 

PTOL-326 (Rev. 7-05) 



Office Action Summary 



Part of Paper No./Mail Date 20050909 



Application/Control Number: 1 0/647, 158 Page 2 

Art Unit: 3627 

DETAILED ACTION 
Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-21 are rejected under 35 U.S.C. 103(a) as being unpatentable over Wheeler et 
al. in view of Official Notice. 

Wheeler et al. teaches a method of managing account through account-based digital 
signatures (ABDS). On specific embodiment of the method of Wheeler et al. includes a point of 
sale transaction using a financial institution account. In particular a user has a device in the form 
of a card. A point of sale card reader includes an alphanumeric keypad , a display 6054, and, in 
this case, a thumbprint reader. The point of sale card reader is in communication via data 
connector with a merchant cash register/terminal. The point of sale card reader is also in 
communication with a standard financial network, which is in communication with and has the 
capability of correctly routing communications between merchants and various financial 
institutions, for example, a bank, savings and loan, credit card company, and the like. Accounts 
maintained with the financial institutions are associated with account records maintained in one 
or more account databases. In this example, financial institution maintains a banking or credit 
card account on behalf of the authorized user of the card. It is also assumed, in this example, that 
the card is associated with the account of the authorized user of the card in account database. 
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With particular regard to Wheeler et al. FIG. 62, a purchaser initiates (Step 6202) a 
transaction with a merchant when the purchaser requests to pay for an item at the merchant cash 
register/terminal The merchant "rings up" (Step 6204) the item on the merchant cash 
register/terminal and the total balance due is displayed to the purchaser. To pay, the purchaser 
inserts (Step 6206) the card into the point of sale card reader (or brings the card into proximity to 
the card reader if both the card reader and the card are equipped for contactless proximity 
communications in accordance with ISO/IEC Standard 14443, which is incorporated herein by 
reference), (reading embedded identification information by the POS device from the machine- 
readable identification card in the possession of the purported payer. Examiner notes here that 
this also teaches the limitations of claim 21, wireless data transmission device incorporated into 
the identification card and POS device) 

Next, the merchant cash register/terminal transmits (Step 6210) the balance due to the 
point of sale card reader via a data connector. The point of sale card reader displays (Step 6212) 
the balance due on display. Preferably, the point of sale card reader retrieves (Step 6214) a list of 
all available (or at least the two to five primary) payment accounts maintained in memory on the 
card and displays (Step 6216) them for selection by the purchaser. If there is more than one 
account from which to choose, the purchaser then selects (Step 6218) one of the listed accounts 
(or a plurality of accounts if the amount of the purchase is going to be split between or among 
more than one account) (identifying the financial institution and the specific account at the 
institution based on the financial instrument used in the transaction). The display prompts (Step 
6220) the purchaser to provide Factor B and C entity authentication information, such as a PIN 
and right thumbprint, using the alphanumeric keypad and thumbprint scanner --but only if he 
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approves of the proposed transaction (including amount of the purchase and the use of the 
selected account(s) for payment). Once the PIN and thumbprint have been input, the point of sale 
card reader transmits (Step 6222) the PIN and digitized version of the thumbprint to the card. 
The card reader next transmits (Step 6224) data representing the message to the card for digital 
signature. 

In this regard, upon receipt of data representing the message, the card originates (Step 
6226) a digital signature for the message by first calculating a hash value for the data and then 
encrypting the hash value using the private key retained within the card. The card then outputs 
(Step 6228) the digital signature, which is received by the point of sale card reader. The point of 
sale card reader then transmits (Step 6230) the message and the digital signature therefor in an 
EC to the financial institution (via financial a communications network) and waits (Step 6232) 
for a response from the financial institution. In this case, the EC is used for transaction 
authentication purposes. (Examiner notes this represents sending the payer's identification 
information, the specified financial institution, account information and transaction details to a 
VPC through networks.) 

With reference to FIG. 63, after the financial network has correctly routed the EC, it is 
received (Step 6302) by the financial institution from the point of sale card reader. The financial 
institution then retrieves (Step 6304) from the account database the public key that is identified 
by the account number. Using this public key, the financial institution attempts to authenticate 
(Step 6306) the message. If the message does not authenticate (in Step 6308), then the financial 
institution responds (Step 6310) to the merchant (via financial network and point of sale card 
reader) with a rejection of the message. Such a response may indicate the reason for the 
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rejection. If the message authenticates (in Step 6308), then the financial institution concludes that 
the message, in fact, came from the person possessing the correct card associated with the 
identified account number--(i.e., Factor A Entity Authentication is obtained). The financial 
institution then determines (Step 63 12) whether or not the Factor B and C entity authentication 
information (e.g., PIN and thumbprint) provided is sufficient for further processing of the 
specific message. If not, then the financial institution responds (Step 63 10) to the merchant (via 
financial network and point of sale card reader) with a rejection of the message. Such a response 
may indicate the reason for the rejection, if desired. If the entity authentication is sufficient (in 
Step 6312), then the financial institution proceeds with further processing (discussed below) of 
the message. (This represents verifying that the embedded identification information read by the 
POS device matches the account holder information for the identified account stored in a remote 
database) (Examiner further notes that Factor B represents prompting payer to input into the POS 
device an additional item of personal information, personal identification number, stored in the 
remote database. Also Factor C, represents biometric information including fingerprint.) 

In the present example, further processing of the message includes a determination (Step 
6314) as to whether the instruction (il) is capable of being performed. If it is not possible to 
execute the instruction (il), then the financial institution responds (Step 6310) with a rejection of 
the message. For example, even though the message authenticated, the purchaser may not have 
enough money or credit associated with the account for the financial institution to approve the 
transaction. Thus, making such a determination typically involves accessing the relevant 
portion(s) of the account record and confirming that the funds are available. If the determination 
(in Step 63 14) is negative, then the financial institution responds (Step 63 10) to the merchant 
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(via financial network and point of sale card reader) with a rejection of the message. Again, such 
a response may indicate the reason for the rejection. (Examiner notes this represents verifying 
that the identified account has sufficient funds to cover a transaction amount specified by the 
payer). 

If the determination in Step 6314 is positive, then the financial institution performs (Step 
6316) the instruction (il). In this example, the instruction (il) from the purchaser is to pay the 
merchant the specified amount of funds from the specified account for the purchase of the 
product. Thus, performing (Step 6316) the instruction typically involves accessing the relevant 
portion(s) of the account record, initiating transfer of the specified amount of funds from the 
account of the purchaser to the merchant (in known manner), and debiting/updating the account 
record accordingly. (Examiner notes that this represents if the verification of both identity of the 
payer and the amount of transaction is successful, causing the specified amount to be 
electronically transferred from the specified payer's account to the designated payee). The 
financial institution also notifies (Step 6318) the merchant (via financial network and point of 
sale card reader) of the approval of the transaction. 

Referring back to FIG. 62, once the merchant receives the response from the financial 
institution, the determination in Step 6232 is positive. The merchant next determines (Step 6234) 
whether the response is an approval or rejection of the transaction. If the financial institution 
does not approve the transaction, then the merchant notifies (Step 6236) the purchaser that the 
transaction was not approved. On the other hand, if the determination in Step 6234 is positive, 
then the merchant completes the sale (Step 6238) by giving the purchaser the merchandise and a 
receipt. 
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As can be seen from the above example, the EC from the purchaser acts as a transaction 
authentication for the requested purchase and payment method even though it may, in fact, pass 
through many "hands" (via the financial network) before it finally reaches the financial 
institution for processing and authentication. 

(The above reference can be found on column 58; line 39 through column 61; line 20) 

Examiner further notes that conventionally personal identification information is 
prestored within a device and must be input into a device before it will operate (column 16; lines 
60-65). Examiner notes that this represents the ability of the invention of Wheeler et al. to 
prompt the user to input into the POS device an additional item of personal information 
embedded in the identification card but not stored in the remote database and verifying the 
additional information provided matches the information embedded in the card. Examiner notes 
once again that Wheeler et al. teaches that this personal information can be a personal 
identification number, biometric data or both (see column 17; lines 13-25). 

Examiner further notes that Wheeler et al. teaches use of the method with an ATM 
machine (e.g. column 24; lines 10-20). Examiner notes that this represents the VPC system is 
established exclusively for one financial institution to provide services to the customers of that 
financial institution. 

Wheeler et al. teaches after entry of credit card information, displaying a prompt for the 
purchaser to provide Factor B and C entity authentication information, such as PIN and right 
thumbprint (see column 59, lines 53-57). Wheeler et al. does not specifically teach Factor B or C 
entity authentication information being an embedded government issue identification card. 
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However, Wheeler et al. does teach embedding personal information within a government issure 
identification card (see for example column 15, lines 30-35). Furthermore, Applicant discloses 
as old and well known that many merchants require a payer (purchaser) to show a photo 
identification card at a POS for additional fraud protection (see Specification page 5, paragraph 
17, lines 1-2). 

It would have been obvious to one of ordinarily skill in the art at the time of the invention 
modify either Factor B or C of Wheeler et al. to be a government issue photo id with embedded 
identification information, as taught by the embodiment of Wheeler et al. found on column 15, 
lines 30-35 in order to provide the old and well known method of fraud protection discloses by 
Applicant. 

Wheeler et al. as described in detail above does not teach the user device being a check 
and where the POS device is able to read account and user information from the MICR line on 
the check. Examiner takes Official Notice that MICR lines on checks are old and well known in 
the art for communication the account information of the check user. It would have been 
obvious to a person of ordinary skill in the art at the time the invention was made to modify the 
system of Wheeler et al. to include checks and to incorporate the account information of the 
debit card of Wheeler et al. in the MICR line of checks. One of ordinary skill in the are would 
have been motivated to combine the art as discussed above in order to all user to pay with 
checks. 

Wheeler et al. does not specifically teach that the POS terminal is a self service terminal. 
Examiner notes that self service terminals are old and well known in the art. It would have been 
obvious to a person of ordinary skill in the art at the time the invention was made to modify the 
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POS terminal of Wheerler et al. to be a self service terminal in order to make the check out 
process more efficient. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Response to Arguments 

Applicant's arguments with respect to claims 1-21 have been considered but are moot in 
view of the new ground(s) of rejection. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to James A. Kramer whose telephone number is (571) 272 6783. 
The examiner can normally be reached on Monday - Friday (8AM - 5PM). 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Alexander Kalinowski can be reached on (571) 272 6771 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



James A. Kramer 
Examiner 
Art Unit 3627 
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